首个面向加州隐私法的专家标注数据集，助力自动化合规审计。
C3PA: An Open Dataset of Expert-Annotated and Regulation-Aware Privacy Policies to Enable Scalable Regulatory Compliance Audits
- 构建了411家机构的隐私政策文本片段，覆盖CCPA披露要求。
- 包含超4.8万条专家标注数据，精准对应加州隐私法规条款。
- 适合研究合规检测、隐私政策分析与自动化审计的学者和开发者。
为实现大规模隐私法规合规性审计，分析和提取组织数据处理行为的工具至关重要。然而，当前多数工具因依赖无监管意识的标注数据集而效能受限——这些数据集来自欧盟GDPR和加州CCPA等重要隐私法规出台前。本文提出首个公开的、具备监管意识的专家标注隐私政策数据集C3PA（CCPA Privacy Policy Provision Annotations），涵盖411家独立组织的隐私政策中与CCPA披露义务相关的超过48,000个文本片段。实验证明，C3PA数据集在支持针对CCPA披露要求的自动化合规审计方面具有独特优势。
原文摘要 · Abstract (English)
The development of tools and techniques to analyze and extract organizations data habits from privacy policies are critical for scalable regulatory compliance audits. Unfortunately, these tools are becoming increasingly limited in their ability to identify compliance issues and fixes. After all, most were developed using regulation-agnostic datasets of annotated privacy policies obtained from a time before the introduction of landmark privacy regulations such as EUs GDPR and Californias CCPA. In this paper, we describe the first open regulation-aware dataset of expert-annotated privacy policies, C3PA (CCPA Privacy Policy Provision Annotations), aimed to address this challenge. C3PA contains over 48K expert-labeled privacy policy text segments associated with responses to CCPA-specific disclosure mandates from 411 unique organizations. We demonstrate that the C3PA dataset is uniquely suited for aiding automated audits of compliance with CCPA-related disclosure mandates.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。